CVE-2022-49260

published 2025-02-26

CVE-2022-49260: In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/sec - fix the aead software fallback for engine Due to the subreq pointer…

Priority P4 20 medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C N I N A H

In the Linux kernel, the following vulnerability has been resolved:

crypto: hisilicon/sec - fix the aead software fallback for engine

Due to the subreq pointer misuse the private context memory. The aead
soft crypto occasionally casues the OS panic as setting the 64K page.
Here is fix it.

Affected

12 ranges

Vendor	Product	Version range	Fixed in
debian	linux	< linux 5.17.3-1 (bookworm)	linux 5.17.3-1 (bookworm)
linux	linux	—	—
linux	linux	>= 6c46a3297beae4ae2d22b26da5e091f058381c7c < 40dba7c26e897c637e91312b35f664f1d4d0073c	40dba7c26e897c637e91312b35f664f1d4d0073c
linux	linux	>= 6c46a3297beae4ae2d22b26da5e091f058381c7c < ef7b10f3cac7810ddcfd976304fd125aca33d144	ef7b10f3cac7810ddcfd976304fd125aca33d144
linux	linux	>= 6c46a3297beae4ae2d22b26da5e091f058381c7c < 5c1149e2abe0b7489300736b8277b45b113de67f	5c1149e2abe0b7489300736b8277b45b113de67f
linux	linux	>= 6c46a3297beae4ae2d22b26da5e091f058381c7c < 0a2a464f863187f97e96ebc6384c052cafd4a54c	0a2a464f863187f97e96ebc6384c052cafd4a54c
linux	linux_kernel	>= 0 < 5.17.3-1	5.17.3-1
linux	linux_kernel	>= 0 < 5.17.3-1	5.17.3-1
linux	linux_kernel	>= 0 < 5.17.3-1	5.17.3-1
linux	linux_kernel	>= 5.14 < 5.15.33	5.15.33
linux	linux_kernel	>= 5.16 < 5.16.19	5.16.19
linux	linux_kernel	>= 5.17 < 5.17.2	5.17.2

CVSS provenance

nvd v3.1 5.5 MEDIUM CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

osv 5.5 MEDIUM

vendor_debian 5.5 MEDIUM

vendor_redhat 5.5 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.